CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

CVE-2018-20184

GraphicsMagick 1.4 snapshot-20181209 Q8 contains a heap-based buffer overflow in the WriteTGAImage function (tga.c) when processing TGA files. The overflow arises because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA spec, enabling a crafted image to trigger...

CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

CVE-2018-20185

GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit hosts is affected by a heap-based buffer over-read in ReadBMPImage (bmp.c) that can cause denial of service when processing crafted BMP files, limited to installations with customized BMP limits. Public advisories reference patches: Debian fixes 1...

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in VerticalFilter

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5664094602919936 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

PT-2018-3483 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions 1.4 snapshot-20181209 Q8 Description: The issue is related to a heap-based buffer overflow in the WriteTGAImage function, which can be exploited by attackers to cause a denial of service. This can be achieved by using ...

PT-2018-3481 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.31 Description: The issue is related to the ReadDIBImage function in GraphicsMagick, which lacks proper input validation. This can be exploited by a remote attacker using a specially crafted dib file, potentially...

graphicsmagick/coder_MIFF_fuzzer: Use-of-uninitialized-value in deflate_slow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5689395047301120 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMIFFfuzzer Fuzz target binary: coderMIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in inflate

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5764892460580864 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_XPM_fuzzer: Use-of-uninitialized-value in QueryColorname

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5724087586914304 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXPMfuzzer Fuzz target binary: coderXPMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging This update wa...

OPENSUSE-SU-2018:3839-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging This update wa...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1430)

This update for GraphicsMagick fixes the following issues : Security issue fixed : - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed : - asanbuild: build ASAN included - debugbuild: build more suitable for debugging %NASLMINLEV...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1431)

This update for GraphicsMagick fixes the following issues : Security issue fixed : - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed : - asanbuild: build ASAN included - debugbuild: build more suitable for debugging %NASLMINLEV...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2018:3827-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2018:3824-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging...